The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 14 Current »

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The IssuerRegex type is a PolicyRule which returns true if the entityID of the party issuing the attributes matches the supplied Pattern.

The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.

Reference

XML Attributes

Name

Type

Default

Description

regex

Pattern


Required, the Java regular expression to match against

caseSensitive

boolean

true

Whether the comparison is case sensitive

Example

Apply this rule if the IdP entityID starts with "https://idp.example.org/":

<PolicyRequirementRule xsi:type="IssuerRegex" regex="^https://idp\.example\.org/.*$" />


  • No labels